Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: qmv53PxMyqauvKqJBU1NS9++l+soKR3xaFEm7nk+Og8=
Subject key identifier: 54:57:A4:CE:B1:5B:48:7C:CD:C7:FB:C7:93:E3:36:2C:02:8C:A4:48
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 01974968784DE1C21F748D499B7B461B0257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0885
Signing time: Sat 07 Jun 2025 08:01:12 +0000
Manifest this update: Sat 07 Jun 2025 08:01:12 +0000
Manifest next update: Sun 08 Jun 2025 08:01:12 +0000
Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: joJwgOeoxfg8LXjdkjMfrpYyBb0o+ps2+k9mWkvXR0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:78:4d:e1:c2:1f:74:8d:49:9b:7b:46:1b:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Jun 7 08:01:12 2025 GMT
Not After : Jun 8 08:01:12 2025 GMT
Subject: CN=5457a4ceb15b487ccdc7fbc793e3362c028ca448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:98:21:b1:d9:94:95:29:be:54:52:2f:f6:
18:1c:7e:63:a9:1d:e3:9f:b9:1e:1b:79:15:25:d6:
f2:41:6b:3c:43:3d:a1:42:16:1c:7a:d8:b1:65:fa:
e2:89:0d:20:9c:8f:2e:1b:70:5c:e7:74:82:7c:57:
58:14:da:ed:44:26:20:d4:a1:dd:08:a0:ea:02:12:
8d:d8:50:a6:e4:89:41:2d:9c:76:84:19:b8:f9:16:
fa:ac:e4:bf:1d:11:90:46:7b:fd:f6:0d:19:f1:53:
e2:cd:c4:65:9a:0a:b2:92:c7:40:58:47:d1:30:18:
69:93:da:15:90:d4:0b:ad:b6:ef:96:d0:48:e7:81:
b0:e1:f4:a7:4f:b7:04:a2:58:6a:ec:ba:43:b5:fb:
83:c5:a1:9c:8b:44:5f:ce:74:40:de:1e:48:cb:6d:
4a:e0:47:f8:40:bf:7b:cc:ea:a0:63:a9:c1:67:87:
bf:1e:aa:e9:c3:12:9f:84:ea:85:97:d4:84:7d:62:
37:48:d6:30:5d:52:67:f4:57:29:e7:8f:e0:17:6e:
fb:a9:b9:7f:1d:c0:2c:a0:a9:b1:42:13:77:93:be:
c4:58:28:7c:f6:47:0e:29:a6:58:d5:da:85:95:7b:
29:24:f4:7d:d0:2f:5f:9c:80:a9:66:69:2a:e5:c5:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:57:A4:CE:B1:5B:48:7C:CD:C7:FB:C7:93:E3:36:2C:02:8C:A4:48
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bd:3a:b0:34:a3:8f:a2:2b:45:97:ff:c3:a5:f7:3e:c7:5e:
a0:d3:77:60:5a:81:18:e1:66:99:a3:00:ae:5c:07:98:32:81:
5e:0c:be:32:e6:e6:69:f2:9b:a2:99:82:bc:f7:a9:51:72:59:
a9:58:ac:fa:48:68:01:c8:28:d9:85:ee:54:2a:3e:cf:48:7c:
c6:3d:3a:2d:03:3b:a0:f4:77:98:69:98:58:63:28:11:62:76:
0f:12:79:93:da:a6:c3:b9:e4:3e:58:60:8e:c9:7d:42:9d:7a:
36:90:70:8e:16:74:70:63:cd:75:1e:99:83:c9:75:9e:b0:f9:
0e:8e:80:0f:69:9c:6b:83:87:da:68:69:0e:cc:9c:5b:fd:7e:
d1:6b:2a:e8:bb:c5:4f:03:52:16:3d:83:12:0b:b9:fe:b5:a7:
e4:af:ee:9a:57:0a:a1:97:f8:50:8d:18:cb:c1:af:11:ee:9f:
e8:3a:e2:ca:9d:63:78:33:a8:c9:c7:c5:2a:2c:ab:ac:2d:10:
27:ab:92:67:bf:cd:37:c1:48:b2:ee:03:ca:9a:44:c2:72:98:
2d:d5:82:94:fc:cc:cc:07:5c:94:7b:8f:c7:f7:83:7b:9d:a4:
6d:1c:9f:27:2a:4f:55:c9:00:12:8c:ca:b6:dd:34:d2:c3:df:
d4:97:1d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaHhN4cIfdI1Jm3tGGwJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz
YjU2YzAwHhcNMjUwNjA3MDgwMTEyWhcNMjUwNjA4MDgwMTEyWjAzMTEwLwYDVQQD
Eyg1NDU3YTRjZWIxNWI0ODdjY2RjN2ZiYzc5M2UzMzYyYzAyOGNhNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YWYIbHZlJUpvlRSL/YYHH5jqR3j
n7keG3kVJdbyQWs8Qz2hQhYcetixZfriiQ0gnI8uG3Bc53SCfFdYFNrtRCYg1KHd
CKDqAhKN2FCm5IlBLZx2hBm4+Rb6rOS/HRGQRnv99g0Z8VPizcRlmgqyksdAWEfR
MBhpk9oVkNQLrbbvltBI54Gw4fSnT7cEolhq7LpDtfuDxaGci0RfznRA3h5Iy21K
4Ef4QL97zOqgY6nBZ4e/HqrpwxKfhOqFl9SEfWI3SNYwXVJn9Fcp54/gF277qbl/
HcAsoKmxQhN3k77EWCh89kcOKaZY1dqFlXspJPR90C9fnICpZmkq5cVxxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRXpM6xW0h8zcf7x5PjNiwCjKRIMB8GA1UdIwQY
MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct
NmY3MWNhZDE2Zjk2LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2
LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJr06sDSj
j6IrRZf/w6X3PsdeoNN3YFqBGOFmmaMArlwHmDKBXgy+MubmafKbopmCvPepUXJZ
qVis+khoAcgo2YXuVCo+z0h8xj06LQM7oPR3mGmYWGMoEWJ2DxJ5k9qmw7nkPlhg
jsl9Qp16NpBwjhZ0cGPNdR6Zg8l1nrD5Do6AD2mca4OH2mhpDsycW/1+0Wsq6LvF
TwNSFj2DEgu5/rWn5K/umlcKoZf4UI0Yy8GvEe6f6Driyp1jeDOoycfFKiyrrC0Q
J6uSZ7/NN8FIsu4DyppEwnKYLdWClPzMzAdclHuPx/eDe52kbRyfJypPVckAEozK
tt000sPf1JcdsA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:35:45 2025 by rpki-client